CVE-2026-61432 describes a path traversal vulnerability in MervinPraison's PraisonAI product prior to version 1.6.78. The issue exists in the FastContext feature where the execute_tool() method prepends the configured workspace_path only for relative paths but does not reject absolute paths or canonicalize the combined path before enforcing workspace containment. Consequently, attackers can supply absolute paths or directory traversal sequences ('../') to functions such as grep_search, glob_search, read_file, or list_directory, allowing them to access files outside the designated workspace directory. The contents of these files can be returned to the caller or injected into the model's tool-result context, potentially exposing sensitive information.

The vulnerability allows an attacker with at least low privileges and user interaction to read and enumerate files outside the intended workspace directory. This unauthorized file access can lead to exposure of sensitive data. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low attack complexity, no privileges required beyond user level, and high impact on confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time. Until a patch is available, restrict user inputs to the affected functions and avoid running the vulnerable versions in untrusted environments. Monitor vendor channels for updates and apply official fixes once released.